General
- Target Screenshot 2026-06-22 08.57.21.png
- Size 105B
- Sample260622-vagpksev2p
- SHA256 33182306dad25139ccb59ba36725ebb36858bf69768d4919404b68c3138ffcd3
- MD5 7e228b0023c2859d08fc89b07413e846
- SHA1 6b93171798887605068834bafe95f4a132da63dd
- SHA512 9349b37bb3789137279f59d8329893efae83e447d2144d2c16d20cf37ff85ee61f61cae77a30f19c528b0f47a74ce641841aa1555762b9a1c81d6821dcc403bb
- TLSH T128B012CBE7224D35C576D37786180610F43147DC5E20D008111CC42978176D4E1C518A
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Screenshot 2026-06-22 08.57.21.png
Resource
win10v2004-20260513-en
19 signatures
600 seconds
Malware Config
Targets
-
- Target Screenshot 2026-06-22 08.57.21.png
- Size 105B
- SHA256 33182306dad25139ccb59ba36725ebb36858bf69768d4919404b68c3138ffcd3
- MD5 7e228b0023c2859d08fc89b07413e846
- SHA1 6b93171798887605068834bafe95f4a132da63dd
- SHA512 9349b37bb3789137279f59d8329893efae83e447d2144d2c16d20cf37ff85ee61f61cae77a30f19c528b0f47a74ce641841aa1555762b9a1c81d6821dcc403bb
- TLSH T128B012CBE7224D35C576D37786180610F43147DC5E20D008111CC42978176D4E1C518A
- MD5 SHA1 SHA512 TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.